CVE-2023-52732

CVE-2023-52732

Critical · published May 21, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ceph: blocklist the kclient when receiving corrupted snap trace

When received corrupted snap trace we don't know what exactly has

happened in MDS side. And we shouldn't continue IOs and metadatas

access to MDS, which may corrupt or get incorrect contents.

This patch will just block all the further IO/MDS requests

immediately and then evict the kclient itself.

The reason why we still need to evict the kclient just after

blocking all the further IOs is that the MDS could revoke the caps

faster.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00527 · 43.8th percentile
Published
2024-05-21T20:15Z
Affected products (14)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.35, < 6.1.136.1.13
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
https://git.kernel.org/stable/c/66ec619e4591f8350f99c5269a7ce160cccc7a7c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a68e564adcaa69b0930809fb64d9d5f7d9c32ba9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/66ec619e4591f8350f99c5269a7ce160cccc7a7c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a68e564adcaa69b0930809fb64d9d5f7d9c32ba9 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 MAY 15:22Z
    ceph: blocklist the kclient when receiving corrupted snap trace
    cvelistv5